SSH Tectia Server for IBM z/OS uses the ASCII and XPLINK features of the IBM Language Environment product (LE). The libraries CEE.SCEERUN and CEE.SCEERUN2 must be available in LPALIB or LNKLST.
The server is program-controlled. All the programs it loads must be program-controlled too, otherwise a BPX015I error will occur when the server tries to create a user process. To make CEE.SCEERUN2 program-controlled, run the job RACFPC from SAMPLIB (shown below).
RACFPC:
//*
//* Make the CEE.SCEERUN2 library program controlled
//*
//ADDUSR EXEC PGM=IKJEFT01,DYNAMNBR=75,TIME=100,REGION=6M
//SYSPRINT DD SYSOUT=*
//SYSTSPRT DD SYSOUT=*
//SYSTERM DD DUMMY
//SYSTSIN DD *
RALTER PROGRAM * +
ADDMEM('CEE.SCEERUN2'//NOPADCHK) +
UACC(READ)
SETROPTS WHEN(PROGRAM) REFRESH
If any crypto hardware devices are to be used, the machine or the LPAR must be enabled for cryptography. Depending on the machine and devices, the required feature may be Feature code 0800 or Feature code 3863.
Reduce Secure Shell risk. Get to know the NIST 7966.
The NISTIR 7966 guideline from the Computer Security Division of NIST is a direct call to action for organizations regardless of industry and is a mandate for the US Federal government. Download now
ISACA Practitioner Guide for SSH
With contributions from practitioners, specialists and SSH.COM experts, the ISACA “SSH: Practitioner Considerations” guide is vital best practice from the compliance and audit community. Download now